Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File: mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier: A6mbSGmjLUPXj8B94j7SCsor1fh7WG33Dpm1L8eG+Lc=
Subject key identifier: 67:67:8D:6F:8C:B2:A8:41:B0:A0:D8:89:BD:99:5D:E9:AE:A7:C0:8C
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 019D3865CEB190D3C59F27F2527D47EB08C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number: 08C2
Signing time: Sun 29 Mar 2026 07:01:29 +0000
Manifest this update: Sun 29 Mar 2026 07:01:29 +0000
Manifest next update: Mon 30 Mar 2026 07:01:29 +0000
Files and hashes: 1: 1-T1FXLyA3VlKdfnCiBGA8u0xGgE.roa (hash: goExnID3vYdULmlOxq4g1dk8QxfW8xHG+c6+SFscKsg=)
2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: oXbUjo6JHn/bCVU4JeuPM6JTZGDqohh3rNO8e5cFxLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:ce:b1:90:d3:c5:9f:27:f2:52:7d:47:eb:08:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Mar 29 07:01:29 2026 GMT
Not After : Mar 30 07:01:29 2026 GMT
Subject: CN=67678d6f8cb2a841b0a0d889bd995de9aea7c08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:d9:2a:d7:5b:8a:44:02:f4:1c:c4:f3:eb:
1e:aa:df:a4:c4:48:8f:14:0d:b5:e1:f3:7b:1c:44:
34:26:bc:44:f3:2d:74:cc:19:6f:3f:f8:bc:49:07:
23:09:f7:c9:d9:dc:7b:de:79:0f:d0:7e:b4:65:14:
fb:8a:6a:6b:99:b7:30:21:d0:d6:98:a4:3a:30:d2:
9b:79:a7:de:fd:c3:c3:f8:5f:28:33:6e:8a:76:d6:
ac:79:74:a1:2a:10:e0:fb:bc:98:9b:85:18:ac:e4:
de:0e:4c:ab:df:3b:41:a7:11:ea:a5:f3:d9:4f:71:
2c:99:0f:d8:59:cf:c7:07:2a:89:73:50:61:6d:01:
eb:3f:cd:df:55:c9:7a:d3:6d:dd:90:f4:a7:c8:86:
87:1d:b8:9f:f2:22:d7:0f:24:85:e7:49:c1:0e:1b:
cd:1d:f6:4e:e7:7f:b8:57:4a:0c:4d:96:3a:be:59:
c9:fe:44:fe:7a:d8:48:e2:99:c2:b1:dd:84:0f:0f:
59:eb:e8:95:b3:7d:33:da:fb:5a:8a:22:3d:92:b2:
c8:84:1b:32:b8:81:ca:9d:b0:85:83:9a:07:5b:9c:
31:fa:ed:48:90:62:04:8c:58:54:7d:eb:43:16:ee:
e0:39:13:30:43:ad:93:0c:a0:4b:eb:4c:96:2b:40:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:8D:6F:8C:B2:A8:41:B0:A0:D8:89:BD:99:5D:E9:AE:A7:C0:8C
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:0d:e6:a7:e9:0d:6e:12:9f:5b:a7:96:a3:70:36:82:0d:
f3:86:5d:21:94:85:a7:43:5f:34:33:62:e2:cc:31:a6:03:0c:
30:c6:c5:8d:bf:48:be:22:93:3f:ca:68:01:89:53:16:7e:43:
dd:09:00:1a:3a:cc:d0:bf:49:15:9e:bf:f6:66:fd:23:71:0d:
04:46:d2:89:a6:cf:4a:32:9b:8b:bc:b4:86:94:ef:fa:ee:5f:
58:7c:f5:19:be:b4:d2:e9:bc:dc:97:79:41:1a:7e:47:d8:b8:
e5:b5:49:16:71:64:5b:f0:67:fc:ac:59:61:39:12:8d:da:0c:
2a:4c:3d:d8:31:47:1e:55:33:25:a2:47:7d:1e:81:9b:a8:d3:
de:4f:b8:45:30:9d:9b:c0:d6:34:e1:58:ef:90:c2:67:20:96:
99:6e:c7:13:76:c9:3c:ee:48:1c:55:57:d2:b0:82:ec:ec:8d:
89:6e:09:3b:d5:e2:67:63:8a:aa:6d:d8:e9:ef:d9:8b:bd:02:
ce:52:60:70:7b:90:45:4b:6e:b4:40:b0:11:e2:8b:f3:3d:76:
96:2d:1d:7a:76:26:fc:7a:ed:f0:63:36:72:46:36:3e:f9:71:
39:bc:03:d2:93:55:d6:1b:cf:56:2e:07:db:f6:10:b3:a9:54:
64:b5:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:47 2026 by rpki-client